ReMe/plugins/home
2026-10-11 18:33:20 +08:00
..
src/reme_home Harden read-only shell commands and filesystem sandboxes 2026-10-11 18:19:15 +08:00
tests Group file sandbox backends in one package 2026-10-11 18:33:20 +08:00
pyproject.toml Add sandboxed Python execution and home AutoBash plugin 2026-10-11 17:11:51 +08:00
README.md Add sandboxed Python execution and home AutoBash plugin 2026-10-11 17:11:51 +08:00

Home plugin

Provides the auto_bash job through an independently enabled ReMe plugin.

Install it into the same Python environment as ReMe:

reme plugins install plugins/home

Enable it in an application config with plugins: [home]. The plugin then contributes the auto_bash job, which can be run with reme start config=<your-config.yaml> job=auto_bash command=pwd.

The job defaults to read-only command validation and a 60-second timeout. Set is_read_only=false to disable command validation. Supplying read_only_paths or writable_paths enables a file sandbox (Bubblewrap on Linux, Seatbelt on macOS), with sandbox paths identical to their host paths. Linux defaults to a 4 GiB cgroup memory limit; macOS has no memory limit and warns when a nonzero memory_limit_bytes value is supplied.